Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa
File:                     326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa (raw, json)
Hash identifier:          ow4mro+woyU8T5l54eQPlwgaXBh0azw3IA8EspjsYe8=
Subject key identifier:   D2:E0:02:97:92:49:10:A7:07:8F:DE:C1:AF:8B:98:2A:3A:11:4A:EA
Certificate issuer:       /CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
Certificate serial:       334803FDEA2DB708938CC518B46574F5B4B6CD4D
Authority key identifier: 76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1
Authority info access:    rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa
Signing time:             Thu 20 Jun 2024 05:23:35 +0000
ROA not before:           Thu 20 Jun 2024 05:18:35 +0000
ROA not after:            Thu 19 Jun 2025 05:23:35 +0000
asID:                     201217
IP address blocks:        2a12:dd47:8e70::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:48:03:fd:ea:2d:b7:08:93:8c:c5:18:b4:65:74:f5:b4:b6:cd:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=765B8B37E5536BE49A0BF3D60EF667B6F4C850C1
        Validity
            Not Before: Jun 20 05:18:35 2024 GMT
            Not After : Jun 19 05:23:35 2025 GMT
        Subject: CN=D2E00297924910A7078FDEC1AF8B982A3A114AEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:2a:96:82:88:c4:f9:57:cc:f6:9d:5d:0c:20:
                    ad:e7:a0:73:96:45:92:bf:a1:32:97:57:df:5a:0f:
                    32:aa:74:21:7e:bb:c1:a5:a4:d1:85:66:dc:b0:03:
                    b3:c3:3c:2e:e2:c0:0c:f3:8f:81:95:9c:8a:7e:4c:
                    19:e4:52:a0:74:00:35:9c:a6:d5:8e:cf:88:84:54:
                    1c:6d:47:38:73:04:3d:10:b4:8f:7f:c3:4c:49:6c:
                    cd:6b:09:b1:51:23:cd:33:08:4f:04:4d:5f:6a:63:
                    8b:7e:2d:a7:f1:05:41:09:6e:30:c0:54:38:d5:70:
                    d0:e8:98:20:62:60:0e:8d:5e:29:80:27:eb:d4:84:
                    bc:b4:fd:d1:ed:65:41:a7:c9:16:75:b4:fb:3a:ad:
                    64:86:32:7d:6a:16:26:e1:d6:b7:c2:de:42:82:4d:
                    4a:4b:c5:89:f5:e8:9f:91:bc:e9:4c:74:cb:a3:29:
                    2c:df:2e:62:e9:b5:a0:77:51:8c:5a:6d:9a:8d:84:
                    87:f7:6a:55:9e:da:87:e8:a1:c4:23:b0:50:3f:ef:
                    4e:72:55:ba:dc:25:5f:80:c7:61:ef:b5:b4:bb:29:
                    28:11:17:80:06:c5:f9:ae:64:11:5d:87:b4:3f:fa:
                    84:56:23:a5:b8:4f:bd:20:d1:61:dc:f1:29:6b:01:
                    10:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E0:02:97:92:49:10:A7:07:8F:DE:C1:AF:8B:98:2A:3A:11:4A:EA
            X509v3 Authority Key Identifier:
                keyid:76:5B:8B:37:E5:53:6B:E4:9A:0B:F3:D6:0E:F6:67:B6:F4:C8:50:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/326131323a646434373a386537303a3a2f34342d3438203d3e20323031323137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a12:dd47:8e70::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:36:69:72:73:de:16:25:6f:55:37:86:40:f4:ac:92:07:12:
         21:21:45:b1:39:dc:56:f1:fa:f4:a9:57:f6:61:fd:43:88:37:
         f4:97:59:20:bf:3b:de:90:1d:39:2a:e4:d8:14:88:4a:ec:e6:
         26:72:fd:18:4e:8f:20:b4:06:2f:93:67:a4:bd:c8:1c:83:df:
         f3:fd:19:99:5a:b6:20:39:6a:78:9a:24:ad:c7:22:97:68:73:
         1e:01:94:dc:5e:2f:ef:cf:50:96:06:7f:0e:99:e8:78:0e:56:
         1b:04:df:31:a5:1b:f6:07:58:73:8c:0f:51:a4:8e:a3:d1:91:
         c5:c1:1c:ec:d5:9f:b0:1c:32:1e:1a:e1:a0:92:40:e8:48:c0:
         88:4e:cb:f7:cc:45:f5:b2:d8:35:02:9a:96:c7:1b:31:e0:36:
         f5:2d:e0:fc:4c:d4:64:11:16:01:4d:cd:36:1c:4a:af:ab:9c:
         fa:e9:3e:69:b2:1f:fc:74:fe:f5:b5:3d:3a:90:f3:e7:8d:2b:
         23:35:6e:b8:1f:81:5e:0c:d1:43:61:1d:79:af:51:71:c3:f2:
         d9:fd:a0:c6:b6:c7:35:54:35:62:ea:ae:bd:56:4a:e1:f4:04:
         8f:0c:e6:d9:6e:fd:81:d5:88:f4:b2:25:ce:e6:25:13:b9:8b:
         a5:6f:38:2a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUM0gD/eottwiTjMUYtGV09bS2zU0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY1QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZG
NEM4NTBDMTAeFw0yNDA2MjAwNTE4MzVaFw0yNTA2MTkwNTIzMzVaMDMxMTAvBgNV
BAMTKEQyRTAwMjk3OTI0OTEwQTcwNzhGREVDMUFGOEI5ODJBM0ExMTRBRUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuKpaCiMT5V8z2nV0MIK3noHOW
RZK/oTKXV99aDzKqdCF+u8GlpNGFZtywA7PDPC7iwAzzj4GVnIp+TBnkUqB0ADWc
ptWOz4iEVBxtRzhzBD0QtI9/w0xJbM1rCbFRI80zCE8ETV9qY4t+LafxBUEJbjDA
VDjVcNDomCBiYA6NXimAJ+vUhLy0/dHtZUGnyRZ1tPs6rWSGMn1qFibh1rfC3kKC
TUpLxYn16J+RvOlMdMujKSzfLmLptaB3UYxabZqNhIf3alWe2ofoocQjsFA/705y
VbrcJV+Ax2HvtbS7KSgRF4AGxfmuZBFdh7Q/+oRWI6W4T70g0WHc8SlrARCxAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU0uACl5JJEKcHj97Br4uYKjoRSuowHwYDVR0j
BBgwFoAUdluLN+VTa+SaC/PWDvZntvTIUMEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY4ZmRlZWMwYzAxOTAzM2RiZGVjYzRmYTQvMS83NjVCOEIzN0U1
NTM2QkU0OUEwQkYzRDYwRUY2NjdCNkY0Qzg1MEMxLmNybDBlBggrBgEFBQcBAQRZ
MFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vZGV2LnR3L3Jwa2kvQXVndXN0LzUvNzY1
QjhCMzdFNTUzNkJFNDlBMEJGM0Q2MEVGNjY3QjZGNEM4NTBDMS5jZXIwgawGCCsG
AQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5jOi8vcnBraS1ycHMuYXJp
bi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZjhmZGVlYzBjMDE5MDMzZGJkZWNjNGZh
NC8xLzMyNjEzMTMyM2E2NDY0MzQzNzNhMzg2NTM3MzAzYTNhMmYzNDM0MmQzNDM4
MjAzZDNlMjAzMjMwMzEzMjMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwQqEt1HjnAwDQYJKoZIhvcN
AQELBQADggEBAFw2aXJz3hYlb1U3hkD0rJIHEiEhRbE53Fbx+vSpV/Zh/UOIN/SX
WSC/O96QHTkq5NgUiErs5iZy/RhOjyC0Bi+TZ6S9yByD3/P9GZlatiA5aniaJK3H
Ipdocx4BlNxeL+/PUJYGfw6Z6HgOVhsE3zGlG/YHWHOMD1GkjqPRkcXBHOzVn7Ac
Mh4a4aCSQOhIwIhOy/fMRfWy2DUCmpbHGzHgNvUt4PxM1GQRFgFNzTYcSq+rnPrp
PmmyH/x0/vW1PTqQ8+eNKyM1brgfgV4M0UNhHXmvUXHD8tn9oMa2xzVUNWLqrr1W
SuH0BI8M5tlu/YHViPSyJc7mJRO5i6VvOCo=
-----END CERTIFICATE-----